Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2006-6347

Опубликовано: 07 дек. 2006
Источник: nvd
CVSS2: 6.5
EPSS Низкий

Описание

Unrestricted file upload vulnerability in TFT-Gallery allows remote authenticated administrators to upload arbitrary .php files, possibly using admin/index.php. NOTE: this can be leveraged with CVE-2006-1412 to create a remote unauthenticated vector.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:tft_gallery:tft_gallery:*:*:*:*:*:*:*:*

EPSS

Процентиль: 64%
0.01152
Низкий

6.5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

github
больше 4 лет назад

Unrestricted file upload vulnerability in TFT-Gallery allows remote authenticated administrators to upload arbitrary .php files, possibly using admin/index.php. NOTE: this can be leveraged with CVE-2006-1412 to create a remote unauthenticated vector.

EPSS

Процентиль: 64%
0.01152
Низкий

6.5 Medium

CVSS2

Дефекты

NVD-CWE-Other